Open platform security
Summay:The Java Card 2.1.1 Runtime Environment (JCRE) Specification describes a secure virtual machine environment for smart cards that facilitates the post-issuance loading and installation of applets, via an optional Installer. The Open Platform (OP) Card Specification provides a robust specification for that installer. It identifies the on-card security features necessary to safeguard the various actors that are involved in a smart card system, including card issuers, application providers as well as cardholders. Such is the nature of information security these days it is necessary to demonstrate the trustworthiness of the OP approach. The Common Criteria (ISO 15408:1999) presents an obvious course of action. A Protection Profile, termed OP3 has therefore been produced in order to ensure the benefit of Common Criteria evaluation of the OP installer, and by virtue of specifying the security requirements of the underlying operating system and integrated circuitry, of Java Cardand the chip-card platform itself. Evaluation will demonstrate that the OP security requirements are correctly implemented and cannot be bypassed, deactivated, corrupted or otherwise circumvented - at least to a given level of confidence (an EAL in Common Criteria terms). This is an amazingly useful first step. However, there are important off-card assets that the smart card does not protect. Common Criteria evaluation does nothing to mitigate the risks to those assets. A Common Criteria evaluation will make assumptions about the environment of the target of evaluation. Evaluation does nothing to validate those assumptions. The assumptions usually concern the compromise of security data held off-card. It therefore makes little sense to rely just on the CC evaluation of just the smart card in order to establish and maintain the security of the overall system. Other steps are necessary. The paper describes what is being done to progress the Common Criteria evaluation of OP and what else is necessary to ensure confidence in the security of the overall system. Researches indicate that Common Criteria evaluation at a modest level of evaluation (e.g. EAL 4) together with an Information Security Management System (ISMS), as specified in BS 7799:1999 Part 2 -particularly to address the off-card security issues- reduces the need for smart card evaluation at higher EALs. For the entire collection see [Zbl 0968.68557].
- The next smart card nightmare. Logical attacks, combined attacks, mutant applications and other funny things
- A programming and a modelling perspective on the evaluation of Java card implementations
- The PACAP prototype: A tool for detecting Java card illegal flow
- SC 2: Secure Communication over Smart Cards
- Security evaluation schemas for the public and private market with a focus on smart card systems
This page was built for publication: Open platform security
Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2771752)
